High severity · published Sep 23, 2026
CVE-2026-81208
DataStage on Cloud Pak for Data has several vulnerabilities
7.7
CVSS
0.3%
EPSS
No
On KEV
Description
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow an authenticated user to access sensitive information due to improper handling of encrypted credentials. An attacker could exploit this vulnerability to obtain credentials intended for other users or environments.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 27% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DO
DataStage on Cloud Pak for Data · IBM
5.4.0.0 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-81208
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-81208
Patch
https://www.ibm.com/support/pages/node/7288649
More from DataStage on Cloud Pak for Data
10.0
CVE-2026-81212
DataStage on Cloud Pak for Data Improper Authorization
9.9
CVE-2026-82110
DataStage on Cloud Pak for Data Path Traversal
9.9
CVE-2026-16346
DataStage on Cloud Pak for Data has several vulnerabilities
9.6
CVE-2026-82101
DataStage on Cloud Pak for Data Path Traversal
9.6
CVE-2026-82107
DataStage on Cloud Pak for Data has several vulnerabilities due to open source software